VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC cipher candidates on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20260627

[Page version: 20260805 22:02:36]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.


Test results

Graphs: (bytes,cycles)
Cycles/byte for long+0 encrypt
25%50%75%aead
10.5610.5810.59ascon128av12
15.3115.3215.33ascon80pqv12
15.3815.3815.38ascon128v12
19.9219.9419.96ascon128abi32v12
20.2320.2620.31T:aes128gcmv1
22.6622.6922.71T:xoodyakround3
25.0825.1325.17T:aes256gcmv1
29.0529.0529.05ascon128bi32v12
30.5130.5830.84T:schwaemm256128v2
40.3540.5440.69T:schwaemm256256v2
40.3940.6840.78T:schwaemm192192v2
40.6340.9041.49T:schwaemm128128v2
48.8849.1449.18romulusn
53.3753.4153.52T:giftcofb128v1
61.9862.2864.88T:grain128aeadv2
63.3363.4163.47T:isapa128av20
66.8567.0667.26T:isapa128v20
78.8978.9078.93T:tinyjambu128v2
79.4779.7180.60romulusm
94.7394.8995.55T:tinyjambu192v2
102.66102.83103.20T:tinyjambu256v2
154.65154.93155.05T!!!romulust
237.70237.73238.00T:isapk128av20
252.75253.90265.39T:elephant200v2
321.09322.71343.43T:isapxv20
325.93326.19326.76T:isapk128v20
13033.7113072.8613079.48T:elephant176v2
14776.5614781.6514785.67T:elephant160v2
33987.9333993.5233994.60aes256gcmv1
Cycles/byte for long+0 decrypt
25%50%75%aead
10.3110.3110.34ascon128av12
15.2515.2515.25ascon80pqv12
15.2915.2915.29ascon128v12
20.3520.3720.39T:aes128gcmv1
20.3020.5420.64ascon128abi32v12
22.2822.5122.56T:xoodyakround3
24.7224.9224.96T:aes256gcmv1
29.3429.3429.34ascon128bi32v12
30.5131.0231.09T:schwaemm256128v2
40.5940.7440.78T:schwaemm192192v2
40.7740.8041.04T:schwaemm256256v2
40.6040.9241.69T:schwaemm128128v2
48.8449.0649.11romulusn
53.2753.4253.56T:giftcofb128v1
63.3163.3463.49T:isapa128av20
66.3866.7767.10T:isapa128v20
62.11?68.08?73.92?T:grain128aeadv2
78.8578.8978.90T:tinyjambu128v2
79.5379.8382.01romulusm
94.5794.5994.65T:tinyjambu192v2
102.52102.66102.83T:tinyjambu256v2
154.27154.68155.29T!!!romulust
237.70237.74237.80T:isapk128av20
252.77253.86265.36T:elephant200v2
321.18322.73343.42T:isapxv20
325.94326.22326.70T:isapk128v20
13025.0313072.6913079.00T:elephant176v2
14776.5614782.9914786.57T:elephant160v2
33980.5733985.4533986.57aes256gcmv1
Cycles/byte for long+0 forgery
25%50%75%aead
10.3110.3210.34ascon128av12
15.2315.2315.25ascon80pqv12
15.2915.2915.32ascon128v12
20.3420.3620.37T:aes128gcmv1
20.6020.6520.65ascon128abi32v12
22.3422.5722.63T:xoodyakround3
24.7724.9225.00T:aes256gcmv1
29.3429.3429.34ascon128bi32v12
30.5331.0431.15T:schwaemm256128v2
33.6933.6933.81T:isapa128v20
40.5240.7340.79T:schwaemm192192v2
40.7740.8141.25T:schwaemm256256v2
40.7540.9741.57T:schwaemm128128v2
41.4941.5141.65T:isapa128av20
48.8449.0549.11romulusn
53.2653.3553.51T:giftcofb128v1
54.2654.4854.54T!!!romulust
62.15?68.08?73.92?T:grain128aeadv2
78.8378.8578.90T:tinyjambu128v2
79.5379.8682.05romulusm
94.5694.5994.62T:tinyjambu192v2
102.53102.66102.82T:tinyjambu256v2
162.52162.55162.61T:isapk128av20
192.72194.77208.15T:isapxv20
202.71202.89203.36T:isapk128v20
252.78253.87265.36T:elephant200v2
846.09850.45851.02aes256gcmv1
13032.7913072.7313079.63T:elephant176v2
14778.2814783.0414787.21T:elephant160v2
Cycles/byte for long+long encrypt
25%50%75%aead
10.3410.3510.41ascon128av12
14.1614.1714.19T:aes128gcmv1
15.1215.1215.12ascon128v12
15.1415.1515.18ascon80pqv12
16.5816.5916.62T:aes256gcmv1
16.6516.6716.68T:xoodyakround3
19.6919.7119.75ascon128abi32v12
29.1529.1529.16ascon128bi32v12
30.5330.5830.65T:schwaemm256128v2
39.8139.9640.02romulusn
40.5140.6640.75T:schwaemm192192v2
40.6140.7240.80T:schwaemm256256v2
40.6840.7840.94T:schwaemm128128v2
50.0550.1350.20T:isapa128v20
52.6553.0353.08T:isapa128av20
53.1553.1953.25T:giftcofb128v1
55.1655.2655.75romulusm
61.7962.0263.76T:grain128aeadv2
64.6364.6364.65T:tinyjambu128v2
74.2174.3875.20T:tinyjambu192v2
77.9778.0178.36T:tinyjambu256v2
103.91104.04104.24T!!!romulust
189.86190.68199.35T:elephant200v2
201.55201.57201.73T:isapk128av20
257.86258.61276.16T:isapxv20
266.00266.22266.56T:isapk128v20
9733.949763.999769.93T:elephant176v2
11108.7811110.8311112.28T:elephant160v2
17419.6217424.7617425.37aes256gcmv1
Cycles/byte for long+long decrypt
25%50%75%aead
10.2010.2210.23ascon128av12
14.2014.2214.24T:aes128gcmv1
15.0915.1015.10ascon80pqv12
15.2515.2515.25ascon128v12
16.4016.4816.49T:aes256gcmv1
16.5916.5916.60T:xoodyakround3
20.1820.1920.20ascon128abi32v12
29.1929.1929.19ascon128bi32v12
30.5730.7830.84T:schwaemm256128v2
39.7939.9340.03romulusn
40.5040.5240.59T:schwaemm192192v2
40.4640.5641.04T:schwaemm128128v2
40.6440.7940.94T:schwaemm256256v2
50.0050.1750.32T:isapa128v20
52.5852.6053.02T:isapa128av20
53.1553.1853.29T:giftcofb128v1
55.2255.4556.71romulusm
64.3164.3564.35T:tinyjambu128v2
61.91?67.49?71.98?T:grain128aeadv2
74.5074.5474.57T:tinyjambu192v2
78.0278.1178.22T:tinyjambu256v2
103.86104.13104.42T!!!romulust
189.87190.67199.30T:elephant200v2
201.57201.60201.81T:isapk128av20
257.68258.48276.19T:isapxv20
265.87266.16266.53T:isapk128v20
9731.219763.969769.68T:elephant176v2
11109.0411111.1811113.49T:elephant160v2
17412.7817418.1017418.88aes256gcmv1
Cycles/byte for long+long forgery
25%50%75%aead
10.2010.2110.23ascon128av12
14.2114.2214.23T:aes128gcmv1
15.0715.0715.09ascon80pqv12
15.2515.2515.25ascon128v12
16.3716.4816.49T:aes256gcmv1
16.6116.6216.63T:xoodyakround3
20.0520.0520.15ascon128abi32v12
29.1429.1429.15ascon128bi32v12
30.5330.7830.84T:schwaemm256128v2
33.5833.6933.83T:isapa128v20
39.7939.9240.02romulusn
40.5040.5240.68T:schwaemm192192v2
40.4740.5540.92T:schwaemm128128v2
40.6940.8040.89T:schwaemm256256v2
41.6841.6942.08T:isapa128av20
53.1253.1353.20T:giftcofb128v1
53.7653.9354.10T!!!romulust
55.2255.4056.68romulusm
64.3064.3564.35T:tinyjambu128v2
61.95?67.50?72.01?T:grain128aeadv2
74.5174.5374.58T:tinyjambu192v2
78.0278.0678.19T:tinyjambu256v2
163.97163.99164.07T:isapk128av20
189.85190.66199.30T:elephant200v2
193.75194.69208.53T:isapxv20
204.30204.50204.76T:isapk128v20
846.27850.79851.27aes256gcmv1
9731.279764.249770.30T:elephant176v2
11110.1111111.5011113.65T:elephant160v2
Cycles/byte for 0+long encrypt
25%50%75%aead
8.078.088.10T:aes256gcmv1
8.058.108.14T:aes128gcmv1
10.0810.0910.18ascon128av12
10.6210.6810.69T:xoodyakround3
15.0115.0115.01ascon128v12
14.9915.0215.07ascon80pqv12
19.4619.5019.62ascon128abi32v12
29.2529.2529.27ascon128bi32v12
30.2530.3330.55T:schwaemm256128v2
30.7430.7830.88romulusn
30.8130.8330.90romulusm
33.6533.6533.65T:isapa128v20
40.3940.4340.60T:schwaemm256256v2
40.0340.5640.95T:schwaemm128128v2
40.2140.5940.62T:schwaemm192192v2
41.7841.8141.86T:isapa128av20
50.3550.3550.35T:tinyjambu128v2
52.9052.9353.08T:giftcofb128v1
53.4353.4653.86T:tinyjambu256v2
53.2753.5053.68T!!!romulust
53.6654.0654.93T:tinyjambu192v2
61.1361.4962.53T:grain128aeadv2
127.90128.73133.78T:elephant200v2
165.38165.39165.48T:isapk128av20
193.70195.71209.10T:isapxv20
205.86206.14206.61T:isapk128v20
851.91855.81856.33aes256gcmv1
6432.446456.946460.87T:elephant176v2
7398.307409.897410.28T:elephant160v2
Cycles/byte for 0+long decrypt
25%50%75%aead
8.068.088.11T:aes256gcmv1
8.068.088.12T:aes128gcmv1
10.1010.1210.14ascon128av12
10.6110.6310.65T:xoodyakround3
15.0615.0915.09ascon80pqv12
15.1215.1215.12ascon128v12
19.4419.4519.45ascon128abi32v12
29.0229.0229.03ascon128bi32v12
30.2430.2930.49T:schwaemm256128v2
30.7530.8230.95romulusn
30.7630.8331.58romulusm
33.7233.7233.72T:isapa128v20
40.1240.2740.33T:schwaemm192192v2
40.4040.4240.51T:schwaemm256256v2
40.6240.8741.01T:schwaemm128128v2
41.8141.8241.83T:isapa128av20
49.8149.8349.86T:tinyjambu128v2
52.9152.9453.02T:giftcofb128v1
53.5353.5553.62T:tinyjambu256v2
53.3753.5653.80T!!!romulust
54.4254.4354.44T:tinyjambu192v2
61.01?66.48?70.37?T:grain128aeadv2
127.85128.69134.66T:elephant200v2
165.39165.44165.49T:isapk128av20
193.72195.84209.15T:isapxv20
205.67206.13206.31T:isapk128v20
846.48850.98851.54aes256gcmv1
6436.456456.976461.19T:elephant176v2
7392.707402.487412.37T:elephant160v2
Cycles/byte for 0+long forgery
25%50%75%aead
8.068.088.11T:aes256gcmv1
8.068.098.12T:aes128gcmv1
10.1010.1210.13ascon128av12
10.6010.6310.65T:xoodyakround3
15.0615.0915.09ascon80pqv12
15.1215.1215.12ascon128v12
19.2919.3619.44ascon128abi32v12
28.9228.9228.92ascon128bi32v12
30.2530.3130.45T:schwaemm256128v2
30.7530.8230.96romulusn
30.7730.8931.57romulusm
33.7233.7233.72T:isapa128v20
40.1240.2640.33T:schwaemm192192v2
40.3940.4340.54T:schwaemm256256v2
40.2540.6940.98T:schwaemm128128v2
41.8041.8141.83T:isapa128av20
49.8149.8349.86T:tinyjambu128v2
52.9252.9753.58T:giftcofb128v1
53.2853.4653.71T!!!romulust
53.5353.5553.63T:tinyjambu256v2
54.4054.4354.43T:tinyjambu192v2
61.11?66.48?70.36?T:grain128aeadv2
127.84128.64134.64T:elephant200v2
165.38165.44165.47T:isapk128av20
193.73195.80208.95T:isapxv20
205.60206.13206.38T:isapk128v20
846.42851.03851.55aes256gcmv1
6436.496456.966461.35T:elephant176v2
7393.287404.827410.82T:elephant160v2
Cycles/byte for 1536+1536 encrypt
25%50%75%aead
10.5710.5810.60ascon128av12
15.0615.0715.08T:aes128gcmv1
15.3115.3115.31ascon128v12
15.3715.3715.39ascon80pqv12
16.8516.8616.88T:xoodyakround3
17.5017.5217.54T:aes256gcmv1
20.1320.1420.19ascon128abi32v12
29.6029.6029.60ascon128bi32v12
31.5231.5431.57T:schwaemm256128v2
40.2140.3240.33romulusn
41.2841.3341.49T:schwaemm128128v2
41.4741.6241.67T:schwaemm192192v2
41.7241.7641.87T:schwaemm256256v2
53.7153.7953.92T:giftcofb128v1
55.6155.7356.10romulusm
56.6156.6256.63T:isapa128av20
62.3062.4164.30T:grain128aeadv2
65.1465.1565.16T:tinyjambu128v2
73.4073.5274.05T:isapa128v20
74.8374.9675.73T:tinyjambu192v2
78.6078.6578.94T:tinyjambu256v2
105.70105.75105.94T!!!romulust
194.54194.68202.83T:elephant200v2
227.41227.43227.68T:isapk128av20
443.97446.07451.20T:isapxv20
449.10449.19449.66T:isapk128v20
9809.529838.169842.46T:elephant176v2
11233.9111236.1611238.84T:elephant160v2
17769.7017774.4117774.88aes256gcmv1
Cycles/byte for 1536+1536 decrypt
25%50%75%aead
10.4410.4510.46ascon128av12
15.0815.0915.12T:aes128gcmv1
15.3315.3515.35ascon80pqv12
15.4615.4615.46ascon128v12
16.7716.7716.78T:xoodyakround3
17.3717.4117.43T:aes256gcmv1
20.6120.6120.61ascon128abi32v12
29.6429.6429.64ascon128bi32v12
31.5431.7231.76T:schwaemm256128v2
40.2140.3040.32romulusn
41.0541.1241.48T:schwaemm128128v2
41.4341.4441.56T:schwaemm192192v2
41.8641.9242.04T:schwaemm256256v2
53.6653.7353.95T:giftcofb128v1
55.7755.8757.10romulusm
56.6256.6656.71T:isapa128av20
64.8564.8664.87T:tinyjambu128v2
63.10?67.97?71.62?T:grain128aeadv2
73.3273.3973.48T:isapa128v20
75.1275.1375.15T:tinyjambu192v2
78.6878.7378.83T:tinyjambu256v2
105.81105.95106.12T!!!romulust
194.55194.69202.82T:elephant200v2
227.44227.46227.64T:isapk128av20
444.00446.12451.22T:isapxv20
449.04449.19449.59T:isapk128v20
9806.709838.039842.12T:elephant176v2
11235.2811236.1511238.71T:elephant160v2
17763.6417767.8617768.16aes256gcmv1
Cycles/byte for 1536+1536 forgery
25%50%75%aead
10.4410.4510.45ascon128av12
15.0815.0915.12T:aes128gcmv1
15.3215.3215.33ascon80pqv12
15.4615.4615.46ascon128v12
16.8116.8216.83T:xoodyakround3
17.3717.4117.45T:aes256gcmv1
20.4720.4720.59ascon128abi32v12
29.5929.5929.59ascon128bi32v12
31.5631.7331.76T:schwaemm256128v2
40.1740.3040.31romulusn
41.0541.1341.54T:schwaemm128128v2
41.4341.4341.50T:schwaemm192192v2
41.8541.9042.11T:schwaemm256256v2
43.9143.9143.98T:isapa128av20
45.4245.4945.58T:isapa128v20
53.6853.7153.91T:giftcofb128v1
55.4955.5855.73T!!!romulust
55.7855.8857.07romulusm
64.8564.8764.88T:tinyjambu128v2
63.13?67.98?71.64?T:grain128aeadv2
75.1275.1375.14T:tinyjambu192v2
78.6878.7278.81T:tinyjambu256v2
180.18180.20180.29T:isapk128av20
194.55194.73202.80T:elephant200v2
289.10290.67298.25T:isapxv20
299.56299.73299.95T:isapk128v20
1196.161200.381200.58aes256gcmv1
9807.099838.399842.83T:elephant176v2
11235.1711236.4911239.00T:elephant160v2
Cycles/byte for 64+64 encrypt
25%50%75%aead
15.7015.8315.85ascon128av12
20.0320.0320.03ascon128v12
20.3520.3620.44ascon80pqv12
26.2326.2926.39T:xoodyakround3
30.1130.1930.21ascon128abi32v12
34.7935.1335.41T:aes128gcmv1
38.7738.8638.99T:aes256gcmv1
39.7339.7339.74ascon128bi32v12
49.0849.2349.33romulusn
53.7254.0354.74T:schwaemm128128v2
53.6854.7255.16T:schwaemm256128v2
64.6464.8465.07romulusm
65.8466.0366.23T:giftcofb128v1
68.2769.3969.77T:schwaemm256256v2
70.6070.8271.22T:schwaemm192192v2
70.9471.4074.62T:grain128aeadv2
77.0277.0277.08T:tinyjambu128v2
87.5987.7187.90T:tinyjambu192v2
92.2892.4092.43T:tinyjambu256v2
144.13144.41144.73T!!!romulust
149.61149.95149.97T:isapa128av20
275.29276.68288.18T:elephant200v2
605.96607.23608.62T:isapa128v20
780.05780.06780.39T:isapk128av20
4602.514602.604604.39T:isapk128v20
4415.324658.044671.87T:isapxv20
12222.1112242.0412247.98T:elephant176v2
15050.1015051.3415054.16T:elephant160v2
25811.9025814.2425820.15aes256gcmv1
Cycles/byte for 64+64 decrypt
25%50%75%aead
15.6915.7115.79ascon128av12
20.2620.2620.26ascon128v12
20.3420.3520.41ascon80pqv12
25.4925.6825.74T:xoodyakround3
30.4230.5230.61ascon128abi32v12
34.7235.0035.08T:aes128gcmv1
38.5638.6738.85T:aes256gcmv1
39.9539.9540.04ascon128bi32v12
49.0249.1349.33romulusn
53.4753.9154.76T:schwaemm128128v2
53.6154.8955.31T:schwaemm256128v2
65.7265.8566.12T:giftcofb128v1
66.7667.0468.25romulusm
69.0869.5169.69T:schwaemm256256v2
70.5370.8270.96T:schwaemm192192v2
76.9376.9577.05T:tinyjambu128v2
72.39?77.23?84.26?T:grain128aeadv2
88.2288.2788.60T:tinyjambu192v2
92.4492.5592.81T:tinyjambu256v2
144.22144.45144.88T!!!romulust
149.78149.82149.91T:isapa128av20
275.44276.84288.12T:elephant200v2
603.76606.18608.02T:isapa128v20
780.13780.24780.55T:isapk128av20
4602.654602.884607.43T:isapk128v20
4416.174655.804670.10T:isapxv20
12221.8312241.9112247.98T:elephant176v2
15045.7315051.3215053.16T:elephant160v2
25805.0925809.4725812.66aes256gcmv1
Cycles/byte for 64+64 forgery
25%50%75%aead
15.6915.7315.78ascon128av12
20.2620.2620.26ascon128v12
20.3220.3320.41ascon80pqv12
25.4825.6625.74T:xoodyakround3
30.5030.5230.54ascon128abi32v12
34.7235.0135.11T:aes128gcmv1
38.5938.7038.84T:aes256gcmv1
39.8439.9039.93ascon128bi32v12
49.0649.1749.29romulusn
53.5353.9454.77T:schwaemm128128v2
52.6754.7555.31T:schwaemm256128v2
65.7865.8766.17T:giftcofb128v1
66.7667.0468.24romulusm
69.3369.5169.68T:schwaemm256256v2
70.5470.8270.90T:schwaemm192192v2
76.9376.9377.05T:tinyjambu128v2
71.91?77.22?83.79?T:grain128aeadv2
88.2288.2388.59T:tinyjambu192v2
91.3991.6691.99T!!!romulust
92.4292.4992.76T:tinyjambu256v2
95.8495.8895.99T:isapa128av20
275.48276.86288.18T:elephant200v2
314.38316.97317.28T:isapa128v20
518.21518.32518.61T:isapk128av20
2316.142427.132444.11T:isapxv20
2446.732446.822449.98T:isapk128v20
9238.349240.579243.86aes256gcmv1
12221.0812243.8512248.58T:elephant176v2
15043.8415051.2515055.54T:elephant160v2